Keep an eye on your Meta Business account, these fake extensions could steal your credentials

• Vietnamese-speaking hackers are using fake browser extensions to steal Facebook Business and Ads accounts
• Bitdefender found two campaigns promoting a malware-laced extension called SocialMetrics Pro through deceptive ads and tutorials
• The malware exfiltrates session data to Telegram bots, enabling account theft and resale for malvertising.

Vietnamese hackers are once again going after people’s Facebook Business and Ads accounts, this time through fake browser extensions.

Earlier this week, security researchers Bitdefender spotted two separate campaigns, using fake websites and malvertising to promote an extension promising the blue check badge for Facebook and Instagram accounts.

The extension is called SocialMetrics Pro, and it’s being promoted through at least 37 ads.